As the mangrove forests of North Sumatra make way for palm oil plantations, the once abundant freshwater fish reserves are rapidly depleting. But it was phishing, not fishing, at the centre of a manhunt which led to the successful capture of a prolific tax-scammer in a remote Indonesian village.
The 36-year-old male, who has not been named, was tracked down following an investigation by HMRC's cybercrime team working alongside the Indonesian National Police (INP), the Royal Canadian Mounted Police (RCMP), the Federal Bureau of Investigation (FBI) and the Australian Federal Police (AFP). He now faces up to 12 years in prison for selling phishing kits to cyber criminals targeting UK taxpayers.
Phishing kits are software tools such as readymade templates, script or code which can be used by scammers to set up fake webpages that mimic legitimate sites. The scammers then trick their unsuspecting victims into visiting the sites and divulging sensitive personal information and/or payment details which can be used to defraud them.
The perpetrator in question has allegedly sold this hoaxing software to cyber criminals all over the World for up to $250 a pop, with ads plastered over social media and crime forums. It replicates the websites of international organisations used by taxpayers in the UK, Canada, the USA and Australia including HMRC, Royal Mail, TV licensing and global banks.
Simon Grunwell, operational lead in HMRC’s fraud investigation service’s cybercrime team, said: “HMRC is one of the most spoofed organisations in the UK and we are doing all we can to protect the taxpayer from criminal attack, even if that attack is launched from the other side of the world. This case should show to others involved in fraud that we can and will find you."
The scale of tax scammers
HMRC reports that in the 12 months to September 2023 it received more than 130,000 reports of tax scams, with 58,000 of these offering bogus tax rebates.
The fraudsters send communications, usually in the form of text messages, emails, phone calls or WhatsApp messages, masquerading as HMRC to entice or intimidate the recipient into giving away personal details or even transferring money to them.
As well as spurious tax rebates, taxpayers should look out for messages purporting to be from HMRC which suggest their tax details need to be updated, or threatening them with arrest for tax evasion.
“We continue to urge taxpayers to be aware that scammers often pose as HMRC. If someone contacts you saying they’re from HMRC and asks you to give personal information or urgently transfer money, be on your guard. Search ‘HMRC scams’ advice on GOV.UK to find out how to report scams and help us fight these crimes,” added Grunwell.
Scammers are increasingly sophisticated and the communication will likely very closely mimic HMRC. If you or a client receives any unexpected communication from the tax authority, do not respond immediately, but take the necessary time to determine whether it seems legitimate.
A checklist to identify tax scammers
HMRC has compiled a handy checklist of signs to look out for to help taxpayers identify communication from tax scammers. As a general rule it is important to bear in mind that you will never receive a genuine email, text message or message in a platform such as WhatsApp from HMRC informing you of a tax rebate or asking you for personal or payment information.
Other signs that indicate you may have been contacted by a fraudster are listed on this page.
If you suspect that a communication you have received might have come from a scammer, the action you should take will depend on the medium used.
If you have received:
Full guidance and advice can be found on HMRC's 'Avoid and report internet scams and phishing' webpage.
Replies (3)
Please login or register to join the discussion.
One person, selling phishing kits for $250 a pop!
Assume this is USD?
So 3,958,500 Indonesian Rupiah
Average salary is IDR 104M per year
would need to sell just 26 phishing kits to live an average life?
We either have a very intelligent young man selling shovels in a gold rush of cyber crime, or a scape goat, and these kits will just pop back up again 10x faster than a multinational team of cyber crime units takes them down.
Thanks (1)That on top of HMRC erroneous messages/letters
Staying on top of this is a nightmare.
Thanks (0)Amy - please don't perpetuate this tedious US-derived myth that there is a tax 'season' in the UK. Self Assessment 'kicks off' on 6th April, the day after the old tax year ends & the day the new tax year begins. It certainly doesn't commence on the date of your article, 2nd November. To imply that it does means you normalise the huge bear-trap that allows HMRC's 'customers' to think they can put their return off until much later in the year, because that's when their hard-working 'agent' loves to receive it...
Thanks (0)